Skip to contentOpensuse Leap vulnerabilities
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the LTE RRC dissector could...CVE-2020-9431Fix available7.5 High
- php, debian linux, opensuse leap +1 more +3 moreFiles added to tar with Phar::buildFromIterator have all-access permissionsCVE-2020-7063Fix available5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreNull Pointer Dereference in PHP Session Upload ProgressCVE-2020-7062Fix available7.5 High
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c...CVE-2020-7043Fix available9.1 Critical
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...CVE-2020-7042Fix available5.3 Medium
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...CVE-2020-7041Fix available5.3 Medium
- suse linux enterprise server, linux enterprise server 12, linux enterprise server 15 +1 more +3 moremysql-systemd-helper allows setting 640 permissions of arbitrary filesCVE-2019-189015.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreAn issue was discovered in the Linux kernel through 5.5.6. set_fdc in drivers/block/floppy.c...CVE-2020-9383Fix available7.1 High
- apache tomcat, geode, blackberry good control +18 more +20 moreImproper Privilege Management in TomcatCVE-2020-1938In KEVPublic exploitFix availableEPSS 99.3%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache TomcatCVE-2019-17569Fix available4.8 Medium
- ruby-lang rake, canonical ubuntu linux, debian linux +2 more +4 moreOS Command Injection in RakeCVE-2020-8130Fix available6.4 Medium
- proftpd, debian linux, fedoraproject fedora +4 more +6 moreIn ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer...CVE-2020-9273Public exploitFix availableEPSS 11.8%8.8 High
- proftpd, opensuse backports sle, leap +2 more +4 moreProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c...CVE-2020-9272Fix available7.5 High
- debian linux, fedoraproject fedora, openidc mod auth openidc +1 more +3 moreA flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs...CVE-2019-20479Fix available6.1 Medium
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +7 more +9 moreext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows...CVE-2020-8992Fix available5.5 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2020-3868Fix available8.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and...CVE-2020-3867Fix available6.1 Medium
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2020-3865Fix available8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA denial of service issue was addressed with improved memory handling. This issue is fixed in iOS...CVE-2020-3862Fix available6.5 Medium
- intel software guard extensions sdk, opensuse backports, leap +2 moreImproper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user...CVE-2020-05617.8 High
- weechat, debian linux, fedoraproject fedora +2 more +4 moreirc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers...CVE-2020-8955Fix available9.8 Critical
- qemu, debian linux, opensuse leap +2 more +4 moreAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...CVE-2020-1711Fix available7.7 High
- libgd, canonical ubuntu linux, debian linux +2 more +4 moregdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing...CVE-2018-14553Fix available7.5 High
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921Fix available7.0 High
- nodejs node, debian linux, nodejs node.js +5 more +7 moreIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...CVE-2019-15606Fix availableEPSS 20.0%9.8 Critical
- nodejs node, node.js, debian linux +8 more +10 moreImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...CVE-2019-15604Fix availableEPSS 20.0%7.5 High
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...CVE-2019-15605Public exploitFix availableEPSS 57.1%9.8 Critical
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to root through migrate_tempdirsCVE-2019-36968.4 High
- opensuse leap 15.1, pcp, suse linux enterprise high performance computing 15-espos +8 more +10 morepcp: Local privilege escalation from user pcp to rootCVE-2019-36958.4 High
- libslirp project libslirp, debian linux, opensuse leap +2 moreIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...CVE-2020-8608Fix available5.6 Medium
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 IA_PD optionCVE-2019-189037.5 High
- debian linux, linux kernel, opensuse leap +2 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize...CVE-2020-8647Fix available6.1 Medium
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8648Fix available7.1 High
- debian linux, linux kernel, opensuse leap +2 moreThere is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the...CVE-2020-8649Fix available5.9 Medium
- ipmitool, debian linux, fedoraproject fedora +1 more +3 moreremote code execution vulnerability in ipmitoolCVE-2020-5208Fix available7.7 High
- canonical cloud-init, debian linux, opensuse leap +2 moreIn cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a...CVE-2020-8632Fix available5.5 Medium
- canonical cloud-init, debian linux, opensuse leap +2 morecloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier...CVE-2020-8631Fix available5.5 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger...CVE-2019-12528Fix availableEPSS 10.5%7.5 High
- squid-cache squid, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM...CVE-2020-8517Fix available7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client...CVE-2020-8450Fix availableEPSS 71.8%7.3 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret...CVE-2020-8449Fix available7.5 High
- gnome librsvg, canonical ubuntu linux, debian linux +3 more +5 moreIn xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause...CVE-2019-20446Fix available6.5 Medium
- canonical ubuntu linux, debian linux, intel 7265 firmware +12 more +14 moreOut of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an...CVE-2020-0569Fix available5.7 Medium
- [unknown] ceph, canonical ubuntu linux, opensuse leap +1 more +3 moreA flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An...CVE-2020-1700Fix available6.5 Medium
- opensuse wicked, leap +1 moreAn ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network...CVE-2020-72167.5 High
- opensuse factory, leap, leap 15.1 +3 more +5 morewicked: Use-after-free when receiving invalid DHCP6 client optionsCVE-2019-189027.5 High
- opensuse leap 15.1, rmt-server, suse linux enterprise high performance computing 15-espos +6 more +8 moreMigrations requests can cause DoS on rmtCVE-2019-18904Fix available6.5 Medium
- python, canonical ubuntu linux, debian linux +5 more +7 morePython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...CVE-2020-8492Fix available6.5 Medium
- denx u-boot, opensuse leap +1 moreIn Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts(...CVE-2020-8432Fix available9.8 Critical
- Show moreLoading…